← Tools

npm Dependency Security Auditor

Resolve the full dependency tree of a package, a package.json, or a public GitHub repo, check every version against the OSV.dev vulnerability database, and get the smallest upgrade that fixes what it finds.

Examples: . Defaults to the latest version.

Data from registry.npmjs.org and OSV.dev. Resolution follows npm's rules for dependencies and optionalDependencies; peer and dev dependencies of transitive packages are not included.